CIA Triad - Correct Answers Confidential - allowing only those authorized to access the data requested
Integrity - keeping data unaltered in an unauthorized manner and reliable
Availability - the ability for those authorized to access data when needed
Parkerian Hexad - Correct Answers Confidentiality Integrity Availability
Possession - physical deposition of the media on which the data is stored
Authenticity - allows us to talk about the proper attribution as to the owner or creator of the data in
question
Utility - how useful the data is to us
Attack Types - Correct Answers Interception
Interruption
Modification
Fabrication
Interception - Correct Answers an attacker has access to data , applications or environment
Interruption - Correct Answers attacks cause our assets to become unusable or unavailable
Modification - Correct Answers attacks involve tampering with our asset
Fabrication - Correct Answers attacks that create false information
Threat - Correct Answers something that has potential to cause harm
, Vulnerability - Correct Answers weaknesses that can be used to harm us
Something you know - Correct Answers username , password , PIN
Something you have - Correct Answers ID badge , swipe card , OTP
Something you are - Correct Answers fingerprint, Iris Retina scan
Somewhere you are - Correct Answers geolocation
Something you do - Correct Answers handwriting , typing , walking
Authentication - Correct Answers verifying that a person is who they claim to be
Mutual authentication - Correct Answers Both parties in a transaction to authenticate each other
- Has digital certificates
- Prevents man in the middle attacks
- The man in the middle is where the attacker inserts themselves into the traffic flow
- Ex . Both the PC and server authenticate each other before data is sent in either direction
Risk management process - Correct Answers 1. Identify Asset - identifying and categorizing assets that
we're protecting
2. Identify Threats - identify threats
3. Assess Vulnerabilities - look for impacts
4. Assess Risk - asses the risk overall
5. Mitigate Risk - ensure that a given type of threat is accounted for
Incident response process - Correct Answers Preparation Detection and Analysis
Identification
Integrity - keeping data unaltered in an unauthorized manner and reliable
Availability - the ability for those authorized to access data when needed
Parkerian Hexad - Correct Answers Confidentiality Integrity Availability
Possession - physical deposition of the media on which the data is stored
Authenticity - allows us to talk about the proper attribution as to the owner or creator of the data in
question
Utility - how useful the data is to us
Attack Types - Correct Answers Interception
Interruption
Modification
Fabrication
Interception - Correct Answers an attacker has access to data , applications or environment
Interruption - Correct Answers attacks cause our assets to become unusable or unavailable
Modification - Correct Answers attacks involve tampering with our asset
Fabrication - Correct Answers attacks that create false information
Threat - Correct Answers something that has potential to cause harm
, Vulnerability - Correct Answers weaknesses that can be used to harm us
Something you know - Correct Answers username , password , PIN
Something you have - Correct Answers ID badge , swipe card , OTP
Something you are - Correct Answers fingerprint, Iris Retina scan
Somewhere you are - Correct Answers geolocation
Something you do - Correct Answers handwriting , typing , walking
Authentication - Correct Answers verifying that a person is who they claim to be
Mutual authentication - Correct Answers Both parties in a transaction to authenticate each other
- Has digital certificates
- Prevents man in the middle attacks
- The man in the middle is where the attacker inserts themselves into the traffic flow
- Ex . Both the PC and server authenticate each other before data is sent in either direction
Risk management process - Correct Answers 1. Identify Asset - identifying and categorizing assets that
we're protecting
2. Identify Threats - identify threats
3. Assess Vulnerabilities - look for impacts
4. Assess Risk - asses the risk overall
5. Mitigate Risk - ensure that a given type of threat is accounted for
Incident response process - Correct Answers Preparation Detection and Analysis
Identification
